Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: OFp/pCYWs72TEelzF8b3t64ZcBrQVwkdrPV1TUSDOvU=
Subject key identifier: 49:DC:8C:19:96:DE:76:39:B6:E8:1D:08:E0:90:58:B5:9F:88:19:AB
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 01969F080DF4A8DCBB45DFD79887A9C04DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0AED
Signing time: Mon 05 May 2025 06:00:27 +0000
Manifest this update: Mon 05 May 2025 06:00:27 +0000
Manifest next update: Tue 06 May 2025 06:00:27 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: SsurnY0FEeN+Pwhwo+twDP/F8KZRcD1TVYrfWvLKMlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:0d:f4:a8:dc:bb:45:df:d7:98:87:a9:c0:4d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: May 5 06:00:27 2025 GMT
Not After : May 6 06:00:27 2025 GMT
Subject: CN=49dc8c1996de7639b6e81d08e09058b59f8819ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:4b:9d:66:dd:c6:8f:95:a3:a6:03:32:c8:
b8:35:6d:69:c3:47:bc:e0:2d:41:e2:80:97:fd:c3:
80:af:dc:ee:4b:16:e3:9d:bc:f7:80:de:a1:a5:07:
9b:84:70:22:cc:5d:99:00:7f:d7:0f:1f:00:e6:9f:
f3:6c:1a:53:70:17:73:92:6d:c2:7b:a7:c1:27:d6:
a3:8b:fe:91:88:df:46:23:10:19:72:f4:08:ee:70:
99:b4:ec:2a:54:f5:fd:0f:74:5e:49:ab:4a:3d:73:
3f:25:f3:bf:ea:b2:0d:be:ed:bb:c0:6d:f8:63:71:
ac:54:1e:29:cf:0d:e1:8d:88:7f:a5:e4:18:77:64:
66:9b:be:01:89:10:46:09:30:75:a8:0a:f2:1e:bf:
15:51:8b:13:d1:b2:25:e3:52:92:72:b9:b0:bb:7b:
68:11:7e:7e:9a:78:34:49:6f:ec:55:05:10:51:2f:
15:8e:ad:47:3b:40:47:cf:b6:44:40:e5:4f:25:26:
3a:9f:51:e0:20:96:ad:1e:96:89:1d:b4:87:46:28:
30:76:9a:07:33:73:8a:c5:d1:b6:b8:69:d5:b3:44:
f8:66:41:63:0c:b7:59:1a:55:c4:3a:2a:34:68:69:
a4:d8:82:42:5b:7b:6e:e3:34:0c:8e:d0:18:8b:a0:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DC:8C:19:96:DE:76:39:B6:E8:1D:08:E0:90:58:B5:9F:88:19:AB
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:05:d6:f7:bd:b5:bb:4e:ab:82:93:aa:ae:42:df:00:71:e5:
9d:93:9e:e9:a9:89:cd:3b:20:f8:ce:44:69:39:da:4f:09:3a:
bd:0d:5a:1d:c1:9e:5b:41:12:9c:98:bf:7d:d3:0f:70:99:ab:
d8:3a:30:eb:83:51:50:88:c3:83:af:3f:29:bd:92:36:e8:aa:
3e:99:e1:9f:87:28:e7:a3:40:29:41:58:18:7e:28:dd:15:38:
1f:41:b5:e1:94:a7:b3:cf:5e:b4:69:13:5d:95:e0:7a:e2:47:
3c:f6:4e:49:b4:cb:d4:98:d6:df:7e:25:29:8f:11:32:41:0f:
c4:d4:c9:c4:44:a9:ae:9c:aa:4d:45:72:72:8b:3f:c4:41:9f:
06:c6:03:ff:74:ad:0d:f3:8d:af:bc:1f:35:2f:e0:40:d6:da:
e1:70:51:6a:13:e7:d6:74:41:6e:6b:50:fc:db:0c:36:ab:15:
84:89:b5:a7:31:10:b7:37:ce:c9:2a:60:12:d6:27:f6:d3:c9:
c5:e0:22:00:cb:f3:34:7c:31:86:6d:b1:ad:97:39:d7:d7:77:
26:17:25:ee:75:27:0f:e0:b2:ac:5b:29:b6:d1:e0:eb:2d:11:
2b:c2:08:38:f5:93:11:23:68:90:33:72:d4:dd:af:fe:6c:ae:
a9:71:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:14:13 2025 by rpki-client